Behavioral task
behavioral1
Sample
95ce03bb892b34849b413b500308e64f11dace18de7d57a6afd679e355b366c5.exe
Resource
win7-20220812-en
General
-
Target
95ce03bb892b34849b413b500308e64f11dace18de7d57a6afd679e355b366c5
-
Size
639KB
-
MD5
2f07da80f4735588893569f1afb46c66
-
SHA1
9861de5b1ad898fc3a955e68a10065b572460a75
-
SHA256
95ce03bb892b34849b413b500308e64f11dace18de7d57a6afd679e355b366c5
-
SHA512
e1ae34c52b7996ca0d78324020512b78594fcd7cb7a45500fc010ed0957793dd1c5610026351434a9129b2a46c91502ffa2e1d67d07d30960b04d6d59d3fe39b
-
SSDEEP
12288:o+RhUm+b2GMazkRGQiYi7C1XcX7IGtu2ZFMba1UOOZKoQWw5IxyAYr5f94B:hRm5pMazkRGQiYi7C1XcX7IGtu2ZFMbn
Malware Config
Signatures
-
resource yara_rule sample themida
Files
-
95ce03bb892b34849b413b500308e64f11dace18de7d57a6afd679e355b366c5.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 582KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE